diff options
| author | Justin M. Forbes <jforbes@fedoraproject.org> | 2019-11-21 14:14:58 -0600 |
|---|---|---|
| committer | Justin M. Forbes <jforbes@fedoraproject.org> | 2019-11-21 14:14:58 -0600 |
| commit | 45948240a7a67c34bb3227f458dc8ee14d7c37dd (patch) | |
| tree | 14049a526b99106c924fbb55747e9ce787d8405f /0001-iwlwifi-dbg_ini-fix-memory-leak-in-alloc_sgtable.patch | |
| parent | e15ee2111479955c9ad79127341d013c1719332b (diff) | |
| download | kernel-45948240a7a67c34bb3227f458dc8ee14d7c37dd.tar.gz kernel-45948240a7a67c34bb3227f458dc8ee14d7c37dd.tar.xz kernel-45948240a7a67c34bb3227f458dc8ee14d7c37dd.zip | |
Fix a bunch of CVEs
Diffstat (limited to '0001-iwlwifi-dbg_ini-fix-memory-leak-in-alloc_sgtable.patch')
| -rw-r--r-- | 0001-iwlwifi-dbg_ini-fix-memory-leak-in-alloc_sgtable.patch | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/0001-iwlwifi-dbg_ini-fix-memory-leak-in-alloc_sgtable.patch b/0001-iwlwifi-dbg_ini-fix-memory-leak-in-alloc_sgtable.patch new file mode 100644 index 000000000..d82c3f254 --- /dev/null +++ b/0001-iwlwifi-dbg_ini-fix-memory-leak-in-alloc_sgtable.patch @@ -0,0 +1,29 @@ +From b4b814fec1a5a849383f7b3886b654a13abbda7d Mon Sep 17 00:00:00 2001 +From: Navid Emamdoost <navid.emamdoost@gmail.com> +Date: Thu, 12 Sep 2019 23:23:27 -0500 +Subject: [PATCH] iwlwifi: dbg_ini: fix memory leak in alloc_sgtable + +In alloc_sgtable if alloc_page fails, the alocated table should be +released. + +Signed-off-by: Navid Emamdoost <navid.emamdoost@gmail.com> +Signed-off-by: Luca Coelho <luciano.coelho@intel.com> +--- + drivers/net/wireless/intel/iwlwifi/fw/dbg.c | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/drivers/net/wireless/intel/iwlwifi/fw/dbg.c b/drivers/net/wireless/intel/iwlwifi/fw/dbg.c +index 5c8602de9168..87421807e040 100644 +--- a/drivers/net/wireless/intel/iwlwifi/fw/dbg.c ++++ b/drivers/net/wireless/intel/iwlwifi/fw/dbg.c +@@ -646,6 +646,7 @@ static struct scatterlist *alloc_sgtable(int size) + if (new_page) + __free_page(new_page); + } ++ kfree(table); + return NULL; + } + alloc_size = min_t(int, size, PAGE_SIZE); +-- +2.23.0 + |